Take the Next Step

App Details

This app contains some useful User Interfaces that we’ve developed for Splunk Administrators.

The most important is the Sideview Editor, which is a general interface for creating, editing and debugging Sideview XML views.

After that possibly the most interesting and practical piece is the License Monitor which has two parts. The first part is a dashboard that charts your indexing so far today, and predicts based on recent indexing rates whether or not you’re going to blow your license today. By drilling down on the spikes in the chart you can see breakdowns by source/index/host. The second part is an alert that you can enable, that will let you know when you’re headed for a violation so you can go and make the changes you need to BEFORE the violation occurs.